Privacy Policy

GrowTale ("we", "our", or "us") is committed to protecting your family's privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our mobile application.

1. Information We Collect

Account Information

• Email address (required for account creation)
• Password (securely hashed, never stored in plain text)
• Display name (optional)

Child Profile Information

• Child's first name
• Age/Grade
• Interests (optional)
• Challenges or situations to address (optional)

Usage Information

• Stories created and viewed
• App preferences and settings
• Device type and operating system

2. How We Use Your Information

We use your information solely to:

• Create and manage your account
• Generate personalized stories for your children
• Save your story library and preferences
• Improve our app and story quality
• Send important account notifications (optional)

3. Data Storage and Security

Your data is stored securely using Supabase, a trusted cloud platform with:

• Encryption at rest and in transit
• SOC 2 Type II compliance
• Regular security audits

Stories and child profiles are associated only with your account and cannot be accessed by other users.

4. Children's Privacy (COPPA Compliance)

GrowTale is designed for use by parents and caregivers with their children. We take children's privacy seriously:

• We only collect the minimum information needed to personalize stories
• We do not collect personal information directly from children
• Parents maintain full control over all child profile data
• You can delete child profiles and all associated data at any time

5. Your Rights and Choices

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and all associated data
• Export your data
• Opt out of non-essential communications

To exercise these rights, contact us at [email protected] or use the in-app settings.

6. Data Retention

• Account data is retained while your account is active
• Deleted accounts are permanently removed within 30 days
• Anonymous, aggregated analytics may be retained indefinitely

7. Third-Party Services

We use the following third-party services:

• Supabase — database and authentication
• RevenueCat — subscription management
• Apple — App Store, payments
• AI services — story and image generation (no personal data shared)

These services have their own privacy policies and are selected for their strong privacy practices.

8. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification. Continued use after changes constitutes acceptance.

9. Contact Us

For privacy questions, concerns, or general support: [email protected]

10. California Residents (CCPA)

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell data)
• Right to non-discrimination

11. European Users (GDPR)

For users in the European Economic Area:

• Legal basis for processing: Contract performance and legitimate interests
• Data controller: GrowTale
• You may lodge complaints with your local supervisory authority